www.lhjournal.ru

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 29:a4:af:68:0c:5b:e7:00:2e:4c:51:b7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lhjournal.ru,OU=Domain Control Validated,C=RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:a4:af:68:0c:5b:e7:00:2e:4c:51:b7
Serial Number (int): 12887977570578392195372175799
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 61:f2:f8:84:df:52:1f:6f:da:84:29:3b:63:48:b0:46:ce:bf:e3:00
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): ed:39:47:eb:0e:1f:df:0e:12:4e:49:fa:91:bb:32:60:85:b9:43:13
Fingerprint (sha256): b7:3a:9d:f7:53:de:e9:91:e2:ea:2f:a2:f4:56:70:3e:ef:20:6d:a0:7e:02:c8:52:b3:d0:b3:a1:d1:69:e3:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.lhjournal.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lhjournal.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lhjournal.ru
lhjournal.ru

Other certificates including the domain name lhjournal.ru

(limited to 100 certificates)
www.lhjournal.ru
www.lhjournal.ru
www.lhjournal.ru

Certificate

The complete raw certificate details for www.lhjournal.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIMKaSvaAxb5wAuTFG3MA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN
MTkwNDI3MjIzMjM4WhcNMjAwNDI3MjIzMjM4WjBLMQswCQYDVQQGEwJSVTEhMB8G
A1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRkwFwYDVQQDExB3d3cubGhq
b3VybmFsLnJ1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA13lbn9Bc
Q5cbK/gKdXs3tUGJ5oHUfAuLFBl0xSj0Orizncfaa+vGWwudgI96NgBAhg2LW2pr
wjFxvqfcGfdm1ThH9Em+0To1Ja6E0/W70+ayHXy5YDavHhOsAYuqXVpf7XSBX5Wh
/uVzr0GhkIcQ1eAAizPAu7C7iUkji5nZqBquAwDYnluGeQ6nm6xU+olRwwK0tJ0r
po3QWYqfRtZzIYFG6s38paVY/G2f7D8oW4ZzkCEpyN7+zp37shAfBlWqPhtNxM0q
6EOfUvhOikNZ0Tpvx71AGhKSifk+jzevTamsYTvs9LEd8I4FdiNkB3U6VAHo3fFU
1vKvZz63DOMEnDrdAdbkPfenPsUDattmXohcxUvq4RkH2oxjmKmIc8Tne0B/6hHY
B3KHjiqTbiSezNsn9wriyf1sMNRdsN24/ocWyj8zajqZBFoZ0nBVCRcFnhpUJPQQ
flaDyUTGf6u6ku8oiMvb1KsXxl+q2myJeFMADNoHUtH+FyOC9cIdHOG94BfgmgCA
/i+i+SCxAMBU3/vbqoiu+lRuoU2M+iSF1PGwRHygzavzyMyPwfOq/m7BohwnKO4U
28h0iQeO6NFRrk/KVvqq5k69eq9Rrf1VfrhTGCeYG9p6thG4Ocd8pfDldGe/lWTb
j8buaBQ+lHAkGvG6O4P+DwSGzAEJahvrnNECAwEAAaOCAuUwggLhMA4GA1UdDwEB
/wQEAwIFoDCBlAYIKwYBBQUHAQEEgYcwgYQwRwYIKwYBBQUHMAKGO2h0dHA6Ly9z
ZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZG9tYWludmFsc2hhMmcycjEu
Y3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nk
b21haW52YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEEAaAyAQowNDAyBggrBgEF
BQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYG
Z4EMAQIBMAkGA1UdEwQCMAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5n
bG9iYWxzaWduLmNvbS9ncy9nc2RvbWFpbnZhbHNoYTJnMi5jcmwwKQYDVR0RBCIw
IIIQd3d3Lmxoam91cm5hbC5ydYIMbGhqb3VybmFsLnJ1MB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUYfL4hN9SH2/ahCk7Y0iwRs6/4wAw
HwYDVR0jBBgwFoAU6k581IAt5RWBhiaMgm3AmKTPlw8wggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWpg
7dkPAAAEAwBHMEUCIQCNaN79BWUolM9wkykkzA45crWEgut1bkFtkEMBoRTbxgIg
fho9e/QvAaKRXMVavDBkfm65oV2KbM4uYaIt6RuGacMAdgBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAWpg7dlWAAAEAwBHMEUCIDtJ7MNIBukj1WRm
MfbG8p5vQ+XMP+/2mpSztOSefrokAiEA/BT9LIfBQ1TokRBAT0V9/Jf2id4NU48Z
HJBSf2hSXCcwDQYJKoZIhvcNAQELBQADggEBAB6417fNOPMlok4Fp4J1+ABTXMvk
UPikBHSg7JiYDs7XrO94hEGVs0lwc3pNCEdeXXnmZMcUvVrOIZ/+j4y7sfYL/4dl
zNx1Hh6LOBjnKRQ69ldpyJ+7Bf5vVcsxWb9suOFCrqkQqmLUhBu69FEh2DfEtFBY
XWOD/eXW6qudHk0asJqMWOJ4f38vSgKh6An7ebdteIbs/aQT5V05Bq/7DEORhrLn
nYLWB6vdoS4Hky6JDhO+DSCQgoaCxdUqikIXAiDTCA2ItGJT/poO2Pf1SMtEf+LI
PQMIgW8tdL3bBg4rvbPhy94eZeyJh2OKA/suEEbRYIoMUPjkdsB/Butv4QI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12887977570578392195372175799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 22:32:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 22:32:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lhjournal.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879057447541092722434839627078120121591993319356437165841256792977748929296703338161122582824548871368769908383843199061100484160174994454551928676441276570495301132083087923157357753320241306998964480636513086532811781645119790049197935034201753874432226505327240060150877459865151432008852714436128713396788001529288181292022721803686945681198286816713878971074417831444495434761932744290809213171527329366647532542359073917368474989736806075477828613197618851714540323651818102479624462240836926867071224607407276798866226242417907877802504855239468761626664813828725153269431423090858339778818133565993198950290647807302314809964717370991668323688701419128289266071559285262020540076059456760532980276171697245611365760630345950730917431365311305179005328693897934507934554312484784662762649504243295016137633627870977046424332425248554443918484191282094178823381195340093467714194754643836058483539531001343972613420109826064140269140112450675407175774916445067727879991909907924281854044976343276279750684191594467113887358792017984203776133419615486864529262114500165330342485860137513980683113545877482904964936805946873884773224844665798463986415612865258461644844681576751703917000758138080808843797599546216207738773150929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhjournal.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhjournal.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61f2f884df521f6fda84293b6348b046cebfe300
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a60edd90f00000403004730450221008d68defd05652894cf70932924cc0e3972b58482eb756e416d904301a114dbc602207e1a3d7bf42f01a2915cc55abc30647e6eb9a15d8a6cce2e61a22de91b8669c30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a60edd956000004030047304502203b49ecc34806e923d5646631f6c6f29e6f43e5cc3feff69a94b3b4e49e7eba24022100fc14fd2c87c14354e89110404f457dfc97f689de0d538f191c90527f68525c27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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